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FURTHER APPLianONS OF Tlffi PRINCIPLES OF INDIRECT SYMMETRY OF 
POSITION IN SECONDARY ALPHABETS 



Section I ' 

INTRODUCTORY REMARKS « 

o 1 . ' ' 1 Parag^h 

Purpose.... ! 1 

General remarks 2 

1. Purpose. — This paper is intended as a supplement to the technical paper, The Principles 
of Indireet Symmetry cf Position in Secondary Alphahets and Their Application in the Solution 
of Polyalphabetie Substiiviion Ciphers,^ in which only on*e of the hiany appHcations of the prip- 
ciples of indirect symmetry is treated. In this paper other applications of this valuable tool 
will be presented, and the steps to be followed in the analysis of three types of cipher systems 
wrill be shown in detail.* 

2. Genaral remarks. — As a general rule, the principles of indirect symmetly can be applied 
in the solution of any cipher system based upon two sequences which are slid against each other. 
This includes polyalphabetie ciphers based^upon a square table or cipher disk, the Wheatstone 
Cipher, autokey ciphers, and some others which are not so frequently met by the cryptanalyst. 

* By William F. Friedman, Cryptanalyst, Chief of Signal Intelligence Section, OfiBce of the Chief Sigpial 
Officer, 1936. 

* The methods and principles described herein were developed in collaboration with other members of the 
staff of the Signal Intelligence Section and I desire to acknowledge my indebtedness for the important contribu- 
tions m^e by theni, especially by Dcs. S. Kullback and A. Sinkov. In particular, it is necessary to indicate that 
credit for the original discovery of the principle of “conversion to monoalphabetic terms”, described in par. 22, 
belongs to Mr. William F. Friedman, Chief of the Section,^ who first applied it in 1923 in the solution of a poly- 
alphabetic cipher involving two sliding, mixed, primary components. 

( 1 ) 
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Solution completed 
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3. An actual example. — A very frequently encountered type of cipher is one in which a 
key letter designates the alphabet to be used for enciphering a complete word. A great many 
users of this type of system comhiohly encipher Ah infrequently used letter, such as Q, J, or Z, 
at the end of each word to indicate to the decipherer that he is to proceed to the next alphabet 
in order, to decipher the following letters. This practice usually facilitates the solution of such 
systems, and in order to bring out other ideas of cryptanalysis, as well as to present an application 
of the principles of indirect' symnietiy* the example hesriu treated wiU be of this. nature. The 
cryptogram of figure 1 is known to have, been emciphered by meana of svteh a system, using two 
different keyword>mixed alphaheta and the letter Q to indicate the end of a word; ' 

CRYPTOGRAM 







fi 






10 




18 




20 


26 


30 


Q X R 


U 


B 


Y 


A y 


K F 


D J V 


K K 


C 


D R B. Y 


W D B az 


U ZiK G I 






» 






40 




46 




60 


: ' ' 66 


80 


N E T 


I 


s 


X 


Ed 


I R 


D u y 


D W 


A 


D V X P < 


J B R X V 


B C Z: Y H 






86 






ro 




78 




80 


8G 


90 


B Z R 


E 


K 


G 


J U 


Z G 


X F I, 


Y S 


U 


H C J G 


M F G Y B 


W I V B E 






86 






100 




105 




no 


116 


120 


Z M Z 


P 


0 


V 


G B 


T J 


DTI 


G S 


X 


MIPS 


U K V X A 


Y E R V T 






116 






130 




136 




140 


146 




D T S 


J 


V 


A 


G Y 


C I 


A I C 


S I 


z 


U T M M 


T S P R E 


Q T U N X 






166 






160 




186 




170 


176 


180 


Q P U 


X 


Y 


E 


R V 


J K 


Q F U 


P Y 


H 


B Z K P 


Y Z M G I 


L G E EX 






186 






190 




196 




200 


206 


210 


E Z Q 


10 


H 


JL 


Y D 


V J 


G M B 


R R 


Y 


K H A 0 


Z X R C 0 


G E B K L 






215 






220 




226 










I X V 


s 


Y 


S 


P U 


H F 


Y D V 


J K 


V 


A B 







Figure 1 

4. Determination of word lengths. — Only one repetition of more than four letters in length 
occurs in the foregoing message. Its first occurrence begins with the 184th letter of the message 
and ends with the 190 th letter, while the second occurrence begins with the 218th letter and ends 
with the 224th letter. Since each word of the message is followed by Q, this repetition must 
represent a five-letter word with the Q’s preceding and following it. Therefore, Uo=Qp in one 
and J„=Qp in the other of the alphabets used in the encipherment of the plain text which causes 
this repetition. Wherever in the cipher text a sequence of letters occurs, produced by the 
alphabet which gives Qp= Jc, this sequence will be preceded and followed in every case by the 
letters U and J respectively. Let us now search through the cipher text of the message for a U 

( 2 ) 
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followed by a J at a distance approximating the length- of one word (not more than 15 letters), 
and tabulate tile sequences thus found, for study. 



4 la 

UBYAYKFDJ 

42 SI 

U Y D W A D V X P J 

,76 7VI 

U H C J 



124 



U K V X A Y E R V T D T S J 

163 159 

U X Y E R V J 

184 190 

UHFYOVJ 

218 224- 

U H F Y 6 Y J 

' ’ FiauBU 2 

The letters fallii^ between each U and J aboTe are in the same monoalphabet, and if thin 
monoalphabet can be solved, a great deal will have been accomplished toward complete solution 
of this message. With such a small amount of data, however, it will be a, very difficult matter 
to make correct assumptions as to the plain teit represented by' the foregoing <4phet text. 
However, if we can determine the cipher letters which represent Q in each alphabet as we have 
those above, solution of the message wiU be facilitated. Let the foregoing portions, with the 
cipher text followii^ them, be superimposed as shown in figure 8, and let us search for diffier 
letters which may represent Qp in each alphabet used in this message. 

4 41 

UBY.AYKFDJVKKCDRBYWDBOZMZKOINETISXEJIRD 

Q Q 

42 59 62 76 

UYDWADVXPJBRXVBGZ Y H B Z REKGJUZGXFIYS 

Q Q 

76 110 

UHCJGMFGYBWIVBEZMZPOVGBTJDTIGSXMIPS 

Q Q 

111 152 

UKVXAYERVTDTSJVAGYCIAICSIZUTMMTSPREGTUNXQP 

Q Q 

163 166 168 . 183 

UXYERVJKQFUP Y H B Z K P Y Z M G I L G E E X E Z Q 

Q Q 

184 217 

UHFYDVJGMBRRYKHAOZXRGOGEBKLIXVSYSP 
Q Q 

U*H F Y D V J K V A B* 

Q Q 



Fiovax 8 



4 



Note the repetition of Y H B Z of 69-62 and ,165-168. Thia is probably a tw*o-letter 
word with its associated word stops, and we shoilld find a Y and Z in each of the first six sections 
of superimposed t«t sepeorated by intervals which correspond to reasonable word lengths. This 
eendithm is met with in all the first six sections; i^d, in the fourth section of the foregoing, Y is 
separated from J by only three cipher letters. This, when coupled with the fact that the 
first word stop, Qp=Ue, occurs as the fourth letter of the message, leads to the conclusion that 
the cipher equivalents for Qp in the first four alphabets have been determined. 

An examination of the remaining cipher text discloses that only two letters, G and X, occur 
in each of the first six sections of cipher text, and we can assume first, that only six cipher alpha- 
bets are involved, and second, that these two letters (G and X) represent Qp in the fifth and sixth 
alphabets, respectively. The following six values have now been obtained: 



Alphabet 1 


Qp=Up 


Alphabet 


QpT=<J« 


Alphabet 3 


Qp^Yp 


Alphabet 4 


Qp=Z. 


Alphabet 5...' 


Qp~Gp 


Alphabet 6__-_-_ 


Qp=Xp 



Fiovbb 4 



Since the equivalents for in six alphabets are known, the message can be broken into 
word lengths as shown in figure 5, 

1 ? 8 4 8 

QXRU B Y A Y K P D J V K K C D R B Y WDBOZ MZKG 

Q Q Q Q Q 

« 1 2 3 4 

INETISX EJIRDUYDWADVXPJ BRXVBGZY HBZ 

Q Q Q Q Q 

8 « 1 2 3 4 

REKG JUZGX FIYSU HCJ GMFGY BWIVBEZ 

Q Q Q Q Q Q 

8 « 1 _ . a 

MZPOVG BTJDTIGSXMIPSU kVXAYERVTDTSJ 

Q Q Q Q 

3 4 8 6 1 

VAGY CIAICSiZ UTMMTSPREG TUNX QPU 

Q Q Q Q Q 

2 3 4 8 6 1 

X Y E R V J K Q F U P Y H B Z K P Y Z M G I L G E E X E Z Q U 

Q Q Q Q Q Q 

2 3 4 8 6 1 

HFYDVJGMBRRY KHAOZXRCOG EBKLIX VSYSPU 

Q Q Q Q Q Q 

2 3 

HFYDVJKVAB 

Q 



FlOtFBX 6 
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5 

5. I^l^tion; of two alphabets.— Note the sequence U T M M T S P R E in alphabet 5. 
The T M M T suggests the AT T A of the word BATTALION , and when the equivar- 
lents obtained from assuming this to be the correct decipherment are substituted in the other 
portions enciphered by this alphabet, the following solution for alphabet 5 is obtained without 
difficulty. 

1 ■ 2 3 4 S 

QXRU BYAYKFDJ VKKCDRBY WDBOZ MZKG 
Q Q Q Q T H E Q 

6 1 2 3 4 

INETISX EJIRDU YDWADVXPJ BRXVBGZY HBZ 

Q Q Q Q Q. 

3 6 1 2 3 4 

REKG JUZGX FIYSU HCJ GMFGY BWIVBEZ 

ONEQ Q QQ Q Q 



5 6 1 2 



M Z P 0 


V G 


B T J D T 


1 


G S X 


M I P S U K V 


X A Y E R V T D T 8 ^1 


T H I R 


D Q 






Q 


Q 


Q 


- * - .. 




4 . . 






3 


6 1 . . 


V A G Y 


C I 


A I C"S I 


Z 


U T M 


M T S P R E G 


T U N X Q P U 


' Q 






Q 


B AT 


T A L I 0 N Q 


Q J 


2 




3 




4 


3 


6 1 


X Y E R 


V J 


K Q F U P 


Y 


H B Z 


K P Y Z H G I L G E E X E Z Q U . 




Q 


' ■ 


Q 


..Q 


E I G H T Q 


Q Q 


2 




3 




4 


3 


6 1 


H F Y D 


V J 


G M B R R 


Y 


K H A 


0 Z X R C 0 G 


EBKLIX VSYS 




Q 




Q 




Q F 0 U R Q 


Q ' 


2 

H F Y D 


V J 


K V*A B 











Q 

Fioorb 6 

An enciphering table is now drawn up in which all the equivalents obtained are tabulated. 
This table is shown in figure 7. 

1 2 3 4 3 6 7 8 9 10 11 12 13 14 13 16 17 18 19 20 21 22 S3 24 25 26 



Plain A BCDEFGHIJ-KLM NOPQRSTUVWXYZ 




Figure 7 



If the same sequence served as both the plain and cipher components, the principles of 
indirect symmetry of position could be appUed in the foregoing diagram between the plain and 
cipher alphabets to obtain new values in other alphabets. However, since the plain and cipher 

71833—33 2 




6 



components of this example are known to be different, eqnivalents in some other alphabet must 
be determined before the principles of indirect symmetry of position can be applied. This . can 
best .be done by solving another portion of the cipher text. 

Solution of alphabet 6 is obtained by assuming a plain-text word. The ripher text following 
the plain-text word E I G H T of alphabet 6 suggests the word THREE. Inswtkm of 
the values obtained from this assumption throughout alphabet 6 yields the following: 



1 a S 4 6 

QXRU BYAYKFDJ VKKCDRBY WDBOZ MZKG 

Q Q Q QTHEQ 

6 1 a 3 4 

INETISX EJIRDU YDWADVXPJ BRXVBGZY HBZ 
T W E N T Y Q Q Q Q Q 

S a 1 2 3 4 

REKG JUZGX FIYSU HCJ GMFGY BWIVBEZ 
ONEQFOURQ Q Q Q Q 

6 a 1 a 

MZPOVG BTJDTIGSX M. I P ,S U K V..^X A Y E R V T D T S J ,, 

T H I R D Q I N F A N T Y Q Q, ' Q 

3 4 6 6 1 

V A G Y C I A I C S I Z U T M M T S P R E G T U N X Q P U 

Q Q B A T T A L I 0 N Q > N 0 W Q Q 

a 3 4 6 6 .1 

XYERVJ KQFUPY HBZ KPYZMG ILGEEX EZQO 

Q Q QEIGHTQTHREEQ Q 

a 3 4 6 ; a 1 

HFYDVJ GMBRRY KHAOZ XRCOG EBKLIX VSYSPU 

Q Q QFOURQEIGHTQ Q 

3 '8 

HFYDVJKVAB 

Q 

"" Figube 8 

The equivalents which have been obtained in alphabet 6 when inserted in figure 7 give 
figure 9. 

1 2 3 4 6 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 

Plain ABCDEFGHIJKLMNOPQRSTUVWXYZ 

fll 



Cipher. 



































U 




















































J 




















































Y 




















































Z 




















T 


U 




V 


K 


X 


Y 


Z 


P 






S 




E 


R 




G 


0 




M 


C 












_£ 








E 


J 


K 


L 


B 










T 


U 




X 


G 




I 


Z 




N 




S 





Figuee 9 
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Ap^ation of principles of indirect symmetry.— By ap^ying the piinciplra of indirect 
symmetry between alphftbets 5 and 6 of figure 9, the followii^ pairs of letters separated by Ibe 
same interval in the original primary component are obtained.* : ■ 



T(5-l) 


D(6— 1) 


E(5— 14) 


T(6— 14) 


K(5— 5) 


E(6— 5) 


R(5— 15) 


U(6— 15) 


X(5— 6) 


J(6— 6) 


G(5--17) 


X(6— 17) 


Y(5-7) 


K(6— 7) 


0(5—18) 


G(6— 18) 


Z(5— 8) 


L(6— 8) 


M(6— 20) 


1(6—20) 


P(5— 9) 


B(6— 9) 


C(5— 21) 


Z(6— 21) 



, Fiqusb 10 

The letters X and J both occur in column 17, giving the pair 

X(6— 17) J(2— 17) 

From alphabets 5 and 6 we have 



X(5— 6) J(6— 6) 

This means that the equivalent primary component formed from alphabets 5 and 6 is the 
same as that which can be obtained from alphabets 6 and 2, and that wherever in figure 9 a 
first letter of one of the pairs obtained from alphabets 5 and 6 occurs in alphabet 6, its associated 
letter can be written in the corresponding column in alphabet 2. For instance,, from T($ — 1) 
P(6 — 1), we can write T(6 — 14) D(2— 14), which means that the letter D must occupy the ceU 
in figure 9 designated by the coordinates (2 — 14). 

An the values which can be entered are givpn in figure 11. , 



X(5— 6) 


J(6— 6) 


X(6— 17) 


J<2— 17) 


T(5- 1) 


D(6 — 1) 


T(6— 14) 


D(2— 14) 


K(5— 5) ‘ 


E(6— 5) 


K(6— 7), 


E(2— 7) 


Z(5— 8) 


L(6— 8) 


Z(6— 21) 


L(2— 21) 


E(5— 14) 


T(6— 14) 


E(6— 5) 


T(2— 5) 


G(5— 17) 


X(6— 17) K 


G(6— 18) 


X(2— 18) 



Figur® 11 



These equivalents are now inserted in figure 9. to give figure. 12. 



1 2 3 4 S 6 7 8 3 10 II 12 13 14 13 1« l7 18 18 20 21 23 23 24 25 38 

Plain.. A BCDEFGHIJKLMN OPQRSTUVWXYZ 
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Fird Taliiee have been obtained in alphabet 2 without making any assomptioiis As to a 
piaiit'tffici word enciphered by this alphabet. These values can be tested by inserting them in 
the cipher text of alphabet 2 as shown in %ure 13. 

BYAYKFDJ 
N Q 

YDWADVXPJ 
N N R Q 

H C J 

Q 

KVXAYERVTDTSJ 
R G ENE Q 

X Y E R V J 

R G Q 

H F Y D V J 

N Q 

H F Y D V J 

N Q 

,, Figub* 13 

Scdution of this monoalphabet checks the values obtained by application of the principles 

of iU^ect symtnettry of |x»ition And gives the partial solution of the message shown in figure 14. 

Q x’r U B Y A y'k F D J V K K C*D R B Y W D ^ 0 Z M Z*K (J 

Q L I A I S 0 N Q Q Q T H E Q 

# ■ J 1 2 J 4 

INETISX EJIRDU YDWADVXPJ BRXVBG2Y HBZ 

TWENTYQ Q INFANTRYQ Q Q 

e 6 12 3 4 

REKG JUZGX FIYSU HCJ GMFGY BWIVBEZ 

ONEQFOURQ QPMQ Q Q 



S t 1 3 

MZPO-VG BTJDTIGSX MIPSU KVXAYERVTDTSJ 
THIRDQINFANTRYQ QSTRAIGHTENEDQ 

3 4 8 « 1 

VAGY CIAICSIZ UTMMTSPREG TUNX QPU 
,Q QBATTALIONQ NOWQ Q 



4 3 

X Y E R V J K Q F U 
R I G H T Q 

‘2 ■ t ‘ 

H F lY D V J G M B R 
P 0 I N T Q 



P Y 

Q 

R Y 

Q 



4 5 3 

HBZKPYZMG ILGEEX 
Q E I G H T Q T H R E E Q 
4 8 6 

KHAOZ XRCOG EBKLI 
Q FOURQ EIGHT 



1 

E Z Q 



X V S 

Q 



U 

Q 



Y S P U 



Q 



2 3 

H.FvY B V J K V A B 
P 0 i N T Q 



Fiqubb 14 
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The new equivalents obtained in alphabet 2 are inserted in figure 12 to give figure 15. 



Plain. 



Cipher. 



1 2 3 4 5 6 7 8 S 10 11 13 13 14 IS 16 17 18 19 20 31 22 23 24 25 36 

ABCDEFGHIJKLMNOPQRSTUVWXYZ 







■ 


i 


■ 


■ 


i 


0 


i 


i 


■ 


i 


■ 


■ 


E 


0 




■ 


■ 


0 


■ 


■ 


E 


E 






IQ 




■ 


i 


y 


y 


0 


□ 


□ 


i 


■ 


B 


Q 


y 


B 


n 


□ 


y 


y 


0 


n 


■ 


E 


E 


fj 


■ 


1 




■ 


■ 


■ 


Q 


■ 


■ 


■ 


■ 


■ 


■ 


Q 


Q 


B 


0 


n 


0 


0 


■ 


0 


■ 


E 


E 






■ 




■ 


■ 


■ 


■ 


■ 


■ 


■ 


1 


■ 


■ 


E 


■ 


E 


0 


y 


0 


E 


0 


0 


fl 


1 


1 




I 


□ 




Q 


Q 


y 


i 






B 


i 


fl 


B 


i 


B 


B 


0 


□ 


B 


1 


y 


Q 


B 


E 


E 




E 


e 




■ 


■ 


0 


5 


0 


0 


B 


■ 


■ 


■ 


■ 


□ 


B 


0 


0 


B 


i 


B 


0 


■ 


B 


■ 




■ 



Fiqubk |5 

7. Reconstruction of the cipher component. — ^From the three partially recovered secondary 
sequences of figure 15, portions of three equivalent primary sequences can be reconstructed by 
the apphcation of the principles of indirect symmetry' of position between the three pairs of 
alphabets which can be formed from alphabets 2, 5, and 6. The tabulation of the pairs obtained 
from alphabets 5 and 6, 6 and 2, and 5 and 2 is given in figure 16.‘ 



5—6 


6—2 


5—2 


T D 


DA 


T A 


K E 


E T 


V S 


X J 


J W 


K T 


Y K 


K E 


X W 


Z L 


L R 


Y E 


P B 


B y 


Z R 


E T 


T D 


P Y 


R U 


U F 


S B 


G X 


X J 


E D 


0 G 


G X 


R F 


H I 


I V 


G J 


C Z 


Z L 


0 X 




S P 

Fioube 16 


M V 
C L 



Since some of the pairs from 5 — 8 and from 6 — 2 are the same, these two sets can be 
combined, and all pairs of both 6 — 6 and 6 — 2 having common letters can be united to give the 
following sequences: 

0 G X J W 
C Z L R U F 
S P B y K E T D A 
M I V 

>Hereafter, w&en reference is made to two alphabets, the number* corresponding to them adU be Uaqd* 
For instance, alphabets 5 and 6 will be replaced by 6 — 6. i 
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The pairs of 5 — 2 can also be united in a similar mannw. 

K T A 
M V S B 
0 X W 
P y E D 

Z R F I 

CL 

If the letters of the sequence K T A of 5 — 2 are separated by one space, the interval 
between them will be the s^e as inSPBYKETDA. All the sequences of 5 — 2 can 
be so treated to give; 

K . T . A 
M . V . S’ . B 
0 . X . V ‘ 

• , , P . Y . E . D 

, ■ Z . jR . F : 

C . L 

Unfortunately, only one of the foregoing sequences can be used to combine any of the 
sequences of 5 — 6, viz, the sequence M . V . S . B which permits the union of M I V and 
SPBYKETDAtogiveMTV . SP BY K E T D A. All the pairs formed from 
the three pairs of alphabets have now been combined to give the following sequences based 
on the interval of 5 — 6: 

M I V . S P BY K E T D A 
0 G X J ff 

G Z L R U F 

At this point it is impossible to insert other letters in ^s equivalent primary component 
unless some other equivalent primary component is made available. Now it usually happens 
in a keyword-mixed sequence that the low-frequency letters 'J K, X Y Z, P Q, and BCD 
retain their original alphabetical order. If this is true of the original primary component with 
which we are working, we can assume that X Y Z are sequent letters in it and bring the sequences 
of 6 — 6 in Juxtaposition as shown below: 

r; 0 G X J W . !. 

M I V . S P B Y K E T D A ' 

C Z L R U F 

The sequence X Y Z appears in the foregoing superimposition in a column, and since the 
assmnption has been made that these three letters are a part of the original primary component, 
the other columns of this arrangement must also be portions of the original primary component. 
This assmnption is corroborated by the fact that 0 P, B C, J K L, T U, and D F fall in their proper 
alphabetioal order. Since B C and D F are sequent letters , in. the columns of the forqgoing 
arrangement, it is reasonable to assume that they can .be mailed to form B, C D ;F.. If :thia is 
true, the BofMIV . SPBYKETDA and the CofCZLRUF may be placed over 
the 0 of HIV . SPBYKETDAto give the following arrangement: 
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MIV.SPBYKE T D A 
0 G X J W . C Z L R U F 
MIV.SPBYKETDA 
OGXJW.CZLRUF 

This arrangement permits the combination of 0 G X J W and C Z L R U F, and also gives 
the following columnar sequences; 

M 0 P . T U 
I G B C D F 
V X Y Z A 
J K L 
S W E R 

From a consideration <A their alphabetical order, the sequences J K L and M OP. T tJ 
can be combined to give JKLMOP . TU. This arrangement, however, gives twp appear^ 
anoesof the letter Miivihe sequence M IV .SEBYK E_T^.D AM, separated ^ an intm^ 
val of 13. This means that the equivalent primary component thus recovered for 5 — 6 consiste 
of two sets of 13 letters each. We can now 'revise the airangepaent which we have been using 
to give the one shown herewith. 

MIV.SPBYKETDA 

OGXJW.CZLRUF. 

P B Y K E T D A M i V . S 
. C Z L R U F . 0 G X J W 

The fact that A follows Z in the columnar sequence of the foregoing diagram leads to the 
conclusion that it is the first letter of the keyword upon which the sequence is based. All the 
columnar sequences can now be united to give: 

A. SWERIGBCDF. JKLMOP. TUVXYZ 

Only three letters, H, N, and Q, are missing from this sequence. The H and Q can be inserted in 
their proper alphabetical positions leaving N to follow A, which gives the sequence 

ANSWERIGBCDFHJKLMOPQTUVXYZ 

8. Beconstraction of the plain component.^ — ^The plain component can now be obtained by 
using the three secondary sequences of figure 15 to prepare the deciphering table shown in figure 
17 in which the principles of direct symmetry of position may be used. 

Cipher. 



t 
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i Plain 



1 3 3 4 8 < 7 8 3 10 11 12 13 14 IS 14 17 18 19 30 21 33 33 24 36 38 

ANSWERIGBCDFHJKLMOPQTUVXYZ 
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The sequence obtained by application of the principles of direct symmetry of position from 
figure 17 is 

E.TRI.ABDFCH. .LMNOPQSU.WY. 



The missing letters, C, J, K, V, X, and Z, can be easily inserted to give 

EXTRICABDFGHJKLMNOPQSUVWYZ 



9. Solution completed. — Now that boA plain and cipher components have been recovered, 
it is possible to prepare sliding strips to complete the decipherment of the message. The correct 
relative positions of these two strips for alphabets 1, 3, and 4 are determined by the values of Q„ 
in these alphabets. The complete decipherment of the cryptogram is given in figure 18. 



QXRU BYAYKFDJ VKKCDRBY WDBOZ MZKG 

0URQ I.IAIS0NQ OFFICERQ WITHQ THEQ 

INETISX EJIRDU YDWADVXPJ BRXVBGZY HBZ 

TWENTYQ THIRDQ INFANTRYQ REPORTSQ ATQ 

E K G J U Z G X F I Y S U H .C J G M F G Y B W I V B E Z 

0 N E Q P 0 U R Q FIVE Q P M 'Q T H A T Q T W E N T Y Q 

MZPOVG BTJDTIGSX MIPSU KVXAYERVTDTSJ 

THIRDQ INFANTRYQ LINEQ STRAIGHTENEDQ 

VAGY CIAICSI2 U T M M T S P R E G T U N X QPU 

OUTQ RESERVEQ BATTALIONQ NOWQ ONQ 

XYERVJ KQFUPY HBZ KPYZMG ILGEEX EZQU 

R I GHTQ FLANKd ATQ BXGHTQTHREEQ TWOQ 

HPYDVJ GMBRRY KHAOZ XRCOG EBKLIX VSYSPU 

POINTQ THREEQ DASHQ FOURQ EIGHTQ SEVENQ 



HFYDVJKVAB 
POINTQ FOUR 

Fioubk 18 



10. Concluding remarks. — In the solution of the foregoing example, the principles of 
indirect symmetry oi position wore applied to an enciphering table (figure 16) to recover the cipher 
component, whUe the plain component was obtained by applying the principles of direct symmetry 
of position to a deciphering table (figure 17) based upon the recovered cipher component. How- 
ever, the same result could have been obtained by first recovering the plain component by the 
application of the principles of indirect symmetry of position to the deciphering table based on 
the normal alphabet, resulting from figure 16. In this case the cipher component could have 
been recovered from an enciphering table based on the recovered plain component, by the use of 
the principles of direct symmetry of position. 
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SOLUTION OF A PROGRESSIVE ALPHABET SYSTEM IN WHICH THE ALPHABETS 

ARE CHANGED FOR EACH LETTER 
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11. Nature of the system. — A very important application of the principles of indirect 
symmetry of j^osition in the analysis of a cipher system based upon a square tsblp will be brought 
out in the solution of another type of progressive-alphabet cipher system. The method of enci- 
pherment is such that the first letter of the plain text is enciphered by a prearranged alphabet 
of a square table, the second letter by the alphabet immediately following that used! for the first 
letter, and so on until 26 letters have been enciphered, after which the cycle of alphabets is 
repeated for each set of 26 letters until the entire message is enciphered. The saipe effect can 
be obtained with a cipher disk such as the obsolete United States Army Cipher Disk, by moving 
the inner disk one space clockwise after the encipherment of each letter of the plain text. 

12. Preliminary analysis. — ^In order to develop the fundamental idea upon which solution 
of the following example is based, the beginnings of two messages enciphered by means of the 
square table shown in figure 19 will be examined. The sequence upon which the table is based 
is keyword-mixed, derived from the word QUESTIONABLY. 



(13) 




71S33-Se 3 



Illicit'' 
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Figxtbb 19 

1ST MESSAGE 

Plain FIRSTBATTALIONWILLSUPPORT 

Cipher... FOWOAFFYCJPHKPYPQURPFGEKE 

Plain SECOND. . . 

Cipher... E E D A L J 

2d message 

Plain THEFIRSTBATTALIONWILLSUPPORT 

apher... TJTJBQBYJJFGPWMRWFWSTXWJKIRI 

Plain THIRD. . . 

apher... 0 M B Q M 



Figdbe 20 
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The cipher text produced by the two encipherments of the words FIRST BATTALION 
WILL SUPPORT is different in each case, but when the two encipherments for these words 
are superimposed, as shown in figure 21, certain phenomena are exhibited by the cipher text. 

Plain text.., F I R S T B A T T A L I 0 N W I L L S U ,P P 0 R T 

1st encipherment.. FOWOAFFYCJPHKPYPQURPFGEKE 
2d encipherment... JBQBYJJFGPWMRWFWSTXWJKIRI 

Fiqttbe 21 



These phenomena deal with characteristics here designated by the term isomorphism. If two 
sequences occiu* in a cryptogram, one of which can be obtained by applying a monoalphabetic 
substitution upon the other, the two sequences are said to be isomorphic. For instance, 
the sequences LRSRULMVLRM and QSFSBQNJ QSN are isomorphic 
because the second can be derived by applying a monoalphabetic substitution to Ibe first 
using the following substitution: 

< 

Plain ABCDEFGHIJKLMNOPQRSTUVWXYZ 

^apher... QN....SF.BJ..., 

Note that the two encipherments of figure 21 are isomorphic, mid that if the interval in 
the original primary component between corresponding cipher letters of this superimposition is 
determined, it will be seen that in each case the letter of the second encipherment is three letters 
removed from the corresponding letter of the first encipherment in the sequence 



QUESTIONABLYCDFGHJKMPRVWXZ. 



If the letters of the first encipherment are paired off with the letters of the second encipherment, 
so that they are separated by the proper interval, portions of the original primary component 
win result. The pairs which can be formed from these two encipherments are tabulated in 
figure 22. 



F . . 'J 

0 . . B 

W . . Q 

A . . Y 

T - . F 



C . . G 

J . . P 

P . . W 

H . . M 

K - . R 



Q . . S 

U . . T 

R . . X 

G . . K 

E . . I 



Fioube 22 



By uniting the pairs which have common 

A, ,Yf .F« .J, . 
0 ! . B 

C.,G..K.«R« 
H . . 

U . . T 
E . . I 



Uie following sequences are formed: 

• W> .S 

X 



letters, 

. P . 
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A comparison of these sequences with the original primary component shows that both 
are identical in interval. This can be seen from the following superimposition. 

QUESTIONABLYCDFGHJKMPRVffXZ 
Q..S A..Y..F..J..P..W.. 

0 . . B 

C . . G . . K . . R . .X 
H . . M 

U . . T 
E . . I 

Figub® 24 

13. An actual example. — It is obvious from the foregoing discussion that if at least two 
differently enciphered versions of a plain-text repetition of fifteen or more letters should 
occur in a cryptogram enciphered by this system, and if the isomorphisms resulting from this 
repetition could be detected by the cryptanalyst, partial or complete reconstruction of the 
original or an equivalent primary, component could be effected. These isomorphisms can best 
be detected by superimposing and comparing all portions of cipher text containing iflte letters 
which are adjacent or separated by one, two, three, or four lettera. An illusteation of this 
method of finding isomorphisms in the cipher text is given in the solution of the following 
example which is enciphered by means of the system referred to above. 

Ckyptogkam 
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The first step in the solution of this cipher is to rewrite it m superimposed cycles of 26 let- 
ters, so that letters enciphered by the same alphabet occur in the same column. 
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14. Detection of isomorphisnu. — ^The next step ie to search through the cipher text of the 
meaeage for isomorphisms. This is done by first superimposing portions of the cipher text with 
like letters occupying adjacent positions. Only six such pairs of letters occur in the message 
and they are given in figure 27 with the 8 letters preceding and following them. 

1 6 10 16 

• • (1) A R N U X XV M P Y 0 P M F Y 

26 .... 80 - 86 

. . (2) . EHCDMHDSMMDWNGJZOKU 

60 66 60 66 
(3) C R B T I B R U Y Y A U P P K 0 H H E 

... ,65 .60 .66 70 . . . 

(4) IBRUYYAUPPKQHHEOFSN 

60 66 70 76 

(6) YYAUPPKO H_H EOFSNFOAS 

86 '80 M 

(6) BJRX0JXK0_0XTP 

Fiaujm 27 

Note that in lines (1) and (5) of figure 27 an isomorphism occurs which begins with the 
doubled letter and extends throughout the remainder of these two lines. 

6 66 6 67 8 60 13 74 9 70 13 73 10 71 16 76 

(X^; X-*H) (M-^0; «-^0) (P->F; P-^F) (Y->S; Y-^) 

6 66 4 66 

However, the isomorphism does not extend to the left any further than X-4J, because U->0 con- 

8 60 13 74 ' 66 ' 

flicts with M-»0 and M->0. Let us now superimpose all the cipher text between H and the end 

6 .... 

of the message, with the corresponding portion following X. 

8 10 U 80 86 10 

XXVMPYOPMFYKZTIWEHCDHHDSMHDWN 

60 70 76 80 86 80 M 

HHEOFSNFOASZGDLTBJRXOJXKOOXTP 

FiauBB 28 

30 81 33 93 8 69 13 74 26 10 39 90 30 91 

W->T and W^T, and M->0, M->0, M-^0, M-^0 and M-»0 indicate that the above two portions of 
cipher text represent the same plain text and that this repetition begins in one case with the 5th 
letter of the message and in the other with the 66tb letter. Since the isomorphism extends 
through the next to last letter of the message, it is safe to include the 33d and 94th letters in the 
repetition. 

15. Reconstruction of the cipher component. — ^Reference to figure 28 above shows that the 
first letter of the first occurrence of the repetition is represented by X, in alphabet 5 and the first 
letter of its second occurrence is rejN’esented by H, in alphabet 14 (66—52=14). Now since Xe 
in alphabet 5 and H, in alphabet 14 represent the same plain-text letter, these two letters must 
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be separated by an interval of 14 minus 5, or 9, in the original primary component. This is also 
true for all the other pairs of the above superimposition, and they can be written as shown 
in %ure 29. 



X H 

V E 

M .0 

P . . F 

Y S 

0 N 



F A 

K ........ Z 

Z . . G 

T D 

I . ... . . . . L 

W T 

Fiottbe 2Q 



E B 

H . . J 

C . . R 

D . . X 

S K 

N P 



By uniting pairs having common letters the following sequences can be formed: 



(1) X TH DJ .W 

(2) V E B 

(3) ..^. MP...... ..OF NA 

(4) .... Y z . . . ; . . . s a . . . . . . . K 

(5) C R 

(6) I . L 



These sequences are portions of the original primary component with which the square table 
was formed and if this component is ke 3 Tword mixed, V W X Y Z, B C D, andJ K are very likely 
sequent letters.. Let us make thje assumption that V W. X Y Z are sequent letters and combine 
sequences (1), (2), and (4) on this basis: 

(7) X Y Z . . . . E T H S G . . . . B D J K . . . . V W 

The sequence B D J K corroborates this assumption, because all are low frequency letters 
and not likely to occur in the keyword, and it is very reasonable now to assume that the key- 
word occupies the portion of the forgoing sequence f alling between Z and B. 

If the letter L does not occiir in the keyword, then from alphabetical considerations it must 
follow the K of 6 D J K in (7), which will permit thb union of (6) and (7). This is impossible 
because the I of (6) would have to occupy the position of G of (7). Therefore, L must be in tlie 
keyword. ..,.3ince the letter L occurs in the keyword, then from alphabetical considerations the 
M P of (3) should fall immediately after the K of (7) to give 

(8) X',Y Z 0 F . . E T H S G N A . . B D J K M P . . V W 

16. Result of oompletiUg the plain component. — There is now a total of 20 letters in (8) 
and it Baay be possible at this point to obtain plain text from some part of the message by COTrect- 
ing for the movement of this sequence against itself and completing the plain component. If tins 
sequence is correct, plain text may result on one generatrix. 

The last 10 letters of the message, X 0 J X K 0 0 X T P, seems a likely portion to use, 
because all of these letters occur in (8). However, iliere are letters nussing from this sequence, 
but since the portion of text to be deciphered contains none of the missing letters, the only 
difficulty which may arise is in the case where a letter in the cipher component may correspond 
to a blank in the plain component. This difficulty can be surmounted by inserting arbitrary 
symbols in the blank spaces of (8) to give (9). 



(9)XYZ0F23ETHSGNA45BDJKMP67VW. 
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The text can now be converted by asaumit^ an initial relative position of the sequence "with 
reject to itsdf , and proceedii]^ as in deciphering. In order to illusta^te this dearly, (9) will be 
used to convert the first tlu-ee letters of X 0 J X K 0 0 X T P. 

Let the initial relative position of the sequence be that shown herewith: 

Hain._.___ X Y 2 0 P 2 3 E T H S G N A 4 5 B D J K M P 6 7 V W 
apher.... TCYZ0F23ETHSGNA45BDJKMP67VW 

In this position X«=Xp. 

'!^e cipher component is moved one space to the left for ‘deciphering the next letter. 

Plain...,.^ XYZ0F23ETHSGNA45BDJKMP67VW 
■ Cipher---^ Y20F23ETHSGNA45BDJKMP67VWX 

This gives 0,==i^. i , i i 

For the next letter the cipher component is again m6v6d.6ne dpace to the left giting J^=Bp. 
This procedure is followed until all 10 letters are converted, giving 

X 0 J X K 0 0 X T P 
^ ■ XZB7 5V7KXN 

' ' liie result of completing' the pldn component for this deciphermeilt is shown in figure 80; 
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M 


H 


G 
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3 
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3 


Z 


H 


P 


S 


N 


X 


E 


W 


T 


E 


0 
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G 


A 


Y 


T 


X 


H 


T 


F 


G 


7 


N 


4 


Z 


H 


Y 


S 


H 


2 


N 


V 


A 


5 


0 


S 


Z 


G 


S 


3 


A 
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B 


F 


G 


0 


N 


G 


E 


4 


X 


5 


D 


2_ 


N 


F 


_A 


N 
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J. 


Jf 


B 
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3 


A 


2 


4 


A 


H 


B 
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D 
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3 


5 
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J 
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5 
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H 
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E 
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A 
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M 
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7 
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V 
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P 


A 


6 


P 


D 


V 


S 


W 


Y 


5 


6 


4 


7 


6 


J 


W 


G 




FiaimK 30 



The undeiiined generatrix obviousily contains the word IIO^ANTRY. This permits us to re- 
place the 2 and 5 which were arbitrarily written in (9) by the letters I and R, respectively to obtain 

X Y Z, 0 F I 3 E T H S G N A 4 R B D J, K M P 6 7 V W. 

17. Bcdution completed. — Since the correctness of (9) has now been established and a word 
of the plaia text determined, it is an easy matter to recover the letters missing in the sequence 
and consequently obtain the complete decipherment of the message as shown in figure 31. 

A R N U X X V M P y 0 P M F Y K Z T I W E H C D M H D S M M D W N 

THIRDBATTALIONTWENTYTHIRDINFANTRY 

GJZOKUVBRQDXTPTCIRBTIBRUYYAUP P' K 0 H 

WILLOCCUPyPOSrTIONNOWHELDBtSECOND 

HEOFSNFOASZGDLTBJRXOJXKOOXTP 
. ' B A f T A L I O N T W E -N T Y T H T R D I N F A N T R Y 

Fiqiibb 31 

18. Concluding remarks. — If, in the encipherment of this cryptogram, the encipherer had 

used different mixed sequences for the plain and cipher components, plain text would not have 
been obtained by completing , the plain component with the ciphw sequence. However, the 
analysis of the cipher would have been identical up to the point of completing the plain com- 
ponent, but, instead of converting only afew letters, of the dpher text and completing the plain 
component, it would have been negessaij to convert the /entire message insofar as the partially 
reconstructed sequence (9) would permit, and then solve, the converted text as a monoalphabet. 
This procedure will be illustrated iu the part of this paper which treats of the solution of the 
Wheatstone Cipher. ^ 
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Section IV 

SOLUTION OP THE MODIFIED WHEATSTONE CIPHER ‘ 



Paragraph 



Praliininary analysis 19 

An actual. Ncample 20 

Itpepos^ctlon of the cipher ^ompondnt 21 



Paragraph 

Conversion of the cipher text to monoalphabetic 



terms 22 

Solution of the converted cipher text ’ . 23 

Reconstruction of the plain component— 24 



19. Preliminary analysis. — ^The application of the principles of indirect symmetry of position 
in the soluSon of the modified Wheatstone Cipher is without doubt the easiest known method of 
solution foftlSs (upher.* This solution depends upon tire presenoh of 4'repetitibiior ro^titibhsliif 
the plain tOKt of a Inessage' and th^ detection and identification as such in the cipher text by 
the cryptanalyst. The repetition or repetitions must be of sufficient length to permit the recon^ 
struction of an equivalent primary component by tlm application of the prinoiples of indirect 
symmetry of position. As in paragraph 14, repetitions can be detected by comparing portions of 
the cipher text until one or more isomorphisms are found which may be utilized to reconstruct 
an equivalent primary component of the cipher sequence. 

Why isomorphisms appew in the cipher t^t resulting from two difierent encipherments of 
the same plain text can be seen from a study of the following plain text and its corresponding 
cipher text. Both sequences used in' the preparation of this encipherment are given herendth, 



* 8 4 2 1 6 

Outer sequence: ' P R I D A . Y 

B C E G H J 
' K L M N 0 P 
Q S T U V W 
X Z 

AHOVDGNUFBKQXIEMTRCLSZyjPW 

1 * 6482 . 

Inner sequence: COURSE 

A B D F G H 
I J K L M N 
P Q T V W X 
y Z 

CAIPyEHNXOBJQZRFLVSGMWUDKT 



‘Tor a dracription of the modified Wheatstone Cipher device and a method for using it see Special Text 
No. 166, Advanced Military Cryptography 1931 Ed., Paragraph 60. 

* For another method of solution see Friedman, W. F., Several Machine Ciphers and Methods for theirSotu- 
Wen, Riverbank Publication No. 20, 1918. 



( 21 ) 
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Initial setting of sequences Ap=Ao 

FIRST *BATQALION*TWENTY*THIRD*INF 
QRSWSIQYMLHTMBRXTXKVANJIRCYSRIUK 

ANTRY*WI TH*SECOND *BATQALION*TWEN 
VDNXZVVHOWMFBRTPIKXCLQIWLHBYWYMZ 

TY*THIRD*INFANTRY*WI L Q * . . . 
DPNKBUCRBKSMZGPYOZZIXAL. . . 

Fioitrb 32 ■, . 

It \tdll be noted that the plain-text repetition underlined in figure 32 does not give a repe- 
tition of the cipher text> However, when the cipher text corresponding to the repeated plain 
text is superimposed their isomorphic character is evident. 

Plain,.. *BATQALION*TWENTY*THIRD* 

First encipherment, I Q Y M L H T M B R X T X K Y A N J I R C Y S R. 

Second encipherment- K X C L, ft I W L H B Y W Y M Z D P » K B U ,C,R B 

Plain... I N F A R T R Y * W I ‘ 

First encipherment... I U K V D N X t V V H - ' 

Second enciphetment. K S M Z G P Y 0 Z Z I 

FiausB 33 ! 

By pairing off the leitters of the first encipherment wilh the letters of the second en- 
cipherment in the above superimposition, the following pairs are obtained: 



I K 


H I 


K M 


C U 


Q X 


T W 


V Z 


S R 


Y C 


B H 


A D 


U S 


M L 


R B 


N P 


D 6 


L Q 


X Y 


J N 


Z 0 



Figubb 34 

In the cipher component, the interval between the first and second letters of each of these 
pairs is 22; that is, for the pair IK, K is the twenty-second letter beyond I. It follows, therefore, 
that pairs having common letters can be united to form portions of an equivalent primaiy com- 
ponent consisting of two sets of 13 letters each, which will be identical with the equivalent 
primary component derived by decimating the original primary component, using the interval 
22 . 

The reason the interval between I and K is 22 is that the long hand of the device made 22 
complete revolutions between the two encipherments of the character beginning each occurrence 
of the repeated plain text. .Since each revolution effects a shift of one space between the plain 
and cipher sequences the 22 revolutions will effect a relative shift of 22 spaces. Also the reason 
the interval between the other corresponding letters of the cipher text remains, constant at 22 
is that the motion of the long hand is governed by the natiire of the plain text enciphered, 
and since , the plain text is the same in both cases, the movement of t^i® long h^d l>olh 
encipherments must be identical. From this it follows that if the nature of . the text between 
the beginnings of the repetitions had been such that the relative shift of the cipher sequence 
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would have beeu: 8 instead of 22, the interval between the corresponding letters of the, two 
encipherments would have been 8, and instead of the pair I K, the pair I B would have 
resulted. 

20. An actual examjde. — In order to show how the foregoing principles can be applied 
in the solution of a messt^e, an actual example will be worked out in detail. The cryptogram 
pven herewith is known to have been enciphered by means of a modified Wheatstone Cipher, 
using two different niixed alphabets. 

Crvptogbam 

S 10 It 20 2S 

G R C S L J J M Y M P B J G G W E N N M R V M N G 

30 35 40 46 60 

CTINU RANYS SXQGR MJVTG XYDJM 

66 60 . 65 70 76 

LIFLJ ERUXZ GPYPO NIGGM LCIWV 

80 86 60 96 100 

rXRUJ UKEBB FRQ W U TNRZI MIZFO 

106 110 ! '116 120 126 

MCKJA SOSYW KUA E P GEPPQ MNIEF 

130 136 140 146 160 

J M G VC VFUDL KYAVU NSCTH TO XXI 

166 160 165 170 ‘ 178 ‘ 

DASMZ XBACJ UJCDR UEQPH WRWFN 

180 " 185 190 196 

Q Z H G M X V V S U B J G D P U L 0 E 0 

. ■ Figvbk 35 

21. Reconstruction of the cipher component. — The first step in the solution of this crypto- 
gram is to pick-oi;t portions of the cipher text which are isomprphic.. The most thorough and 
straightforward way of doing this is to follow the procedure given in paragraph 14; that is, 
to superimpose portions of the cipher text falling on each side of like letters which are adjacent 
or separated by one, two, three, or four letters. However, this procedure is rather laborious, 
and it may be eliminated by scanning the cipher text and picking out pecuhar patterns of 
cipher letters which are isomorphic, somewhat in the same manner as a search would be made for 
repetitions in a monoalphabetic cipher. Such distinctive patterns as A B B A, ABACA, 
A A B B A, A B C B A, etc., are easy to pick up wth the eye and in a majority of the cases 
where they do occur in the different encipherments of the same plain text, the cipher text corre- 
sponding thereto can be easily discovered. 

In the foregoing message two groupings of the type A B C B A are found, beginning with 
the 94th and 159th letters of the cipher text, respectively. The portions of text including them 
are superimposed in order to determine whether the isomorphism extends further in either 
direction. 

83 86 60 96 100 106 110 116 

EBBFRQWUTNR Z I M I Z FOMCKJASOSYWKUAEP 

160 .166 160 166 170 176 180 

XXIDASNZXBA C J U J C DRUEQPHWRWFNQZHGN 

Figubb 36 






24 



S6 161 

‘ In this superimposition, the similarity which can be verified begins with F^D and ends 
116 Its 

with A->H and it is possible that the plain-text repetition extends on each side of these liimts, 

86 105 114 179 

because neither corroborations nor contradictions can be found forB->I, and E->G. However, it 
can be said that the repetition does not extend further than one letter on each side of tdiese limits, 

84 149 86 160 116 180 110 176 

because B-^X confiicts with B-»I, and P->N confiicts with W->N. In order to preclude the 
possibility of introducing error, only those portions which show positive evidence of similarity 
will be used in reconstructu^ an equivalent primary component. 

By pairing off the letters of the foregoing isomorphism and uniting thOee' pairs having 
co mm on letters, the following sequences can be formed: 

0 R A H 
M U Z C E 
Y F D 

^ I J P 

K Q S ff N B 
T X 

Unfortunatdyi since no complete equivalent primary component can be recovered from the 
available data, it will be necessary to obtain portions of some other equivalent primary com- 
ponent whicl; w^ permit the consolidation of the above sequences. These portions may be 
obtained either by assuming sequent letters in the original primary component as was done in 
the two preceding examples^ or by finding other isomorphisms in the message amd using the 
sequences formed from them to combine the sequences already obtained. Of these two courses, 
the latter is the easier to apply in the analyris of this cipher, because the sequences used are 
known to be systematically mixed, and to make correct assumptions of sequent letters in such 
eases is difficult. 

In order to find other isomorphisms, repeated letters of the cipher text which are adjacent 
are superimposed as shown in figure 37. 

6 10 16 

(1) GRCSLJJMYMPEJGG 

10 16 '20 ■ ‘ ' 

(2) .._. JJMYMPEJGGWENNMRVM 

10 16 20 25 

(3) MPEJGGWENNMRVMNGCT 

so 36 40 

(4) TINURANYSSXQGRMJVT 

60 65 70 76 

ZGPYPONIGGMLCIWVFX 

80 86 90 

(6) FXRUJUKEBBFRQWUTNR 

no 116 120 125 

WKUAEPGEPPQMNIEFJM 

140 145 160 166 

(8) UNSCTHTOXXIDASNZXB 

176 180 186 190 

(9) FNQZHGNXVVSUBJGDPU 

Figijbe 37 
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n 17» . W 188 84 183 8S ISS 

In lines 6 an<l 9 of the superimposition the repetitions U->G and U-^G, B->V and B->V, and 

87 185 83 191 

R-^U and R-»U indicate that portions of these two lines are isomorphic. The isomorphism begins 

81 179 

with U-»G and extends to the end of each of the two lines. A snperimposition of the text occurring 
beyond these two points is made in order to determine where the isomorphism ends. 

80 86 90 95 ' 

U J U K E B B F R Q W U T N R Z I M I Z P 

180 185 190 ' 105 

ZHGNXVVSUBJGDPUL0E0-- 
FtaoBB 38 

05 198 07 198 

A check at the end of the message is found, viz., I-^O and I->0, which indicates that the 

*?■ 

isomorphism includes these letters. However, there is no corroboration for J->H, and althougli 
it may be possible to include this pair of lettm, it is not used in fomnng the following, sequences:: , 

’ Q B V 
M E X 
F S ' 

10 
K N P 
RUG 
W J 
Z L 

A reference to the first set of partial sequences found shows two, M U Z C E and 
K Q S W N B, which have letters in common with three of the foregoing sequences. These 
three are Q B C, HEX, and K N P. In the first set the interval between M and E is 4; in this 
set it is 1. The new set can therefore be reduced to the Interval of the first by rewriting each of 
its sequences so that the letters are separated by an interval of 4 instead of 1. 



Q . 


. . B . 


. . V 


0 R A H 


H . 


. . E . 


. X 


H U Z C E 


P . 


. . S 




y F D 


I . 


. . 0 




I J P 


K . 


. . N . 


. . P 


K Q S W N B 


R . 


. . U . 


. . G 


T X 


W . 


. . J 






Z . 


. . L 







All these sequences can now be combined to give the following equivalent primary compcMient: 
YFDKQSWNBIJPVORAHHWZCEGLTX 



26 



22. CoQTersion of the cipher text to monoelphahetic tern^s. — At this point it is necessary to 
explalh an important characteristic of the cipher text produced by the Wheatstone device. 
The fundamental cryptographic idea underlying this mstrupient is tp provide two sequences, 
each of which is composed of a different number of elements, connected by a mechanispi in 
stn^ a manner that intervals between elements of one Can be measured in terms of intervals 
between elements ©f the other. For instance, in the encipherment of the word FIRST 
of the example given in paragraph 19 of this section, the interval between the F and I in the 
plain sequence is equal to the interval between the Q and R of the cipher sequence. Likewise, 
the interval between the I and R in the plain sequence corresponds to the interval between 
R and S in the cipher sequence, and so on for the other letters of the message. From this it 
can be seen that the cipher text of a message merely indicates to the decipherer the number 
of spaces over which the long hand must be moved in order to pick up the next plain-text letter, 
and that the cipher sequence serves us a Sprt of “yardstick” on which these spaces are measured. 
It follows from this that unless th* exad order of the letters of the cipher sequence is'khown, 
the correct interval between letters of the plain sequence cannot be determined and conse- 
quently Solution of the message is ^ill a"^ difficult matter, even if the plain sequence is known. 
On the othOT hand, if the cipher sequence fe kno^, the intervals between letters of the plain- 
sequence can be determined, and if an arbitrary sequence is inscribed on the outer circle of the device, 
the process of decipherment wiU result in a monoalphabetic substitution on the plain text.^ 

Now the sequence of 26 letters which has been recovered may be either the original primary 
component or any one of the eleven equivalent primary components of 26 letters which can 
be derived by a decimation of the original primary component, using an odd interval other 
than 13. Since it is necessary to obtain the exact-sequence of the inner circle in order to con- 
vert the cipher text to monoalphabetic terms, it will be necessary at this point to determine 
the original primary component of the cipher sequence. This component can be obtained by 
either of two methods. One is to derive tiie other eleven possible primary components of 
26 letters from the sequence above, make the cipher-text conversions for each, and select that 
conversion which gives a monoalphabetic distribution. Another is to follow the procedure 
shown on pages 6-11 inclusive of Methods for the Reconstruction of Primary Alphabets, 
ij^uW^tion No. 21, Biverbank Laboratories, by William F. Friedman, in which tiie recon- 
struction of systematically mixed alphabets is treated. The second of these twq po^i- 
bilities is easier to apply in this instance; the first method would have to be used if the 
sequences, were random-mixed. It. is found, that the component derived by a.decwaation pf the 
foregoing; sequence, using interval 21, gives the best arrangement for a systematical]^ mixed 
alphabet. This component is given herewith. 

YEHPWFG.MVNDLUOBKTZRIQXCAJS 

In this component it is found that the pairs YW, WV, VU, and ZX are each separated by three 
letters, while the pairs UZ and XY are separated by four letters. This gives a diagram with 
six columns, and if the letters U V W X Y Z are arranged so that they occur in their normal 
alphabetical order, the following diagram is obtained and the correctness of the sequence is 
established : 

* This idea of conversion of the cipher text can be applied not only to the Wheatstone Cipher, but also to a 
great many other types of cipher systems based upon two sliding alphabets, if both the cipher sequence and the 
es^t. wawmr in which it is tg be used ate known. 
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... ■ V 5- « : 

CONFER, 

A R D G H I 
J K L M P Q 
S T U V W X 
‘ " Y Z 

If th© sf qiience resultii^ from ihjs cBqgram’is inaci;ib«d on, the imjer circle of the device, 
any sequence wliatsoever inscribed .pn, thn guter circle, and the process of deciphering applied 
to the cipher te^t, a/monoalphabetic substitution oh the plain text wiJI result. For instance, if 
we write the normal alphabet, with the word stop(*) falling after Z, in the twenty-seven spaces 
providgd On the outer circle, the sCqu^ce obtained froih the foregoing dia^*am on the inner 
circle, »t R of the inher circle opposite A of ^e outer cifcle, and convert the mets^e as we would 
if we were deciphering it, the conversion shown in figure 3fi ie obtained, 

Message G R C S L J J M" Y M P E J G G W E K N H R V M N G C T I N U 

Conversion.... SDHKfflHQIPKHDLKHDLKHSHFHDTMPEH 

R A NY S S X Q G R MJ V T G X Y B J M L I- P L J E RU X Z 

N S D U S R U K W H W U W D T H H W J S W D P V H K A U C Y 

G P Y P 0 N I G G M L C I W V F X R U J U K E B B F R Q 'W U 

M I E H r’m W I H I M X T D H D T P I U H K W I H Y K ,M W D 

TNRZIMIZFOMCKJASOSYWKUAEPGEPPQ 

H*IGIWHES*TH*IGIWHIMXTDHJMGIHY 

• 

IINIEFJIIGVCVFUBLKYAVUNSCTHTOXXI 

KMWDM^IGIWHDKHIMXTDHDTPIUHDLKH 

D A S N Z X B .A C d U J C D R y E Q P H W R W E N Q Z H 6 N 
YKMWDH*IGIWHE S * TH^IGIWHIMXTDHK 

X V V S U B J G D P U L 0 E 0 
WIHYKMWDH*IGIWH 

Figure 39 

23. Solution of the converted cipher text.— ^oe the principles involved in the solution of a 
monoalphabetic cipher are elementary, it is not considered necessary to go into a detailed expla- 
nation of how the solution of this example ia obtained. The plain text of the message is given 
in figure 40. 
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Converaion.... SDHKWIHQIPKHDLKHDLKHSHFHDTMPEH 
Plain text AT*ONE*ZERO*TWO*TWO*A*M*THIRD* 

NSDUSRMKWHWMWDtHMWJSWDPVHKAUCY 

BATQALION*NINTH*INFANTRY*OCQUP 

MIEHRMWIHIMXTDHDTPIUHKWIHYKMWD 

IED*LINE*EIGHT*THREQ*ONE*POINT 

H*IGIWHES*TH*IGIWHIMXTDHJMGIHY 
* S E V E N * D A S H * S E V E N * E I G H T * F I V E * P 

KMWOH*IGIWHD K' H I M X T D HD T P I U H D L K H 

0 I N T * S E V'E N * T 6 * E I G H T * T H R E Q * TWO* 

Y K M W D H * I G I W H E S ,* T H. I G I W H I M X T D H K 

POINT* SEVEK* DASH * S E V E N * E I G ,H T * 0 

W I H Y K M W D H * I G I W H 

N E * P 0 I N T * S E V E N * . 

I -1 Figdhb 40 ■ ' ! i , 

24. Raconstraotion.' of the plun component. — 'All the variable elehients incorporated in the 
cryptogram have been obtained except the plain cdmponent. Probably the easiest method of 
recoyeringit is to prepare a deciphering alphabet from the above solution based on the arbitrary 
sequence iped in converting the cipher text. The plain cornponent of this deciphering alphabet 
will be fhe plain component used in the preparation of the message. 

Decibhebinq AcrHABEX 

• 

Cipher ABCDEFGHIJKLMNOPQRSTUVWXYZ* 

Plain... G TDMV*EFOWIB RZLAHQYNGP S 

■ ' All 27 elements of the plain component cannot be obt^ed directly from the above decipher- 
ing alphabet, but it is possible to recover the missing letters by reconstructing the diagram from 
which it was obtained, using the method by which the original primary cijdier component was 
recovered. Application of this method pves the arrangement shown herewith which can be 
completed without difficulty. 

3 3 S 6 1 4 

LISTEN 
A B C D F G 
H . .MOP 
Q R . V W . 

Y Z 
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Section V 

AUTOKEY CIPHER USING THE CIPHER TEXT AS A KEY 

Faragrapb 

General discussion 26 

25. General discussion. — The application of the principles of indirect symmetry of position to 
isomorphisms in the cipher text of a message enciphered by means of an autokey cipher system 
using the cipher text as a key affords an easy method of solution. 

The method of solution for this type of autokey cipher is identical with that used for the 
Wheatstone Cipher up to the point where the cipher component is reconstructed from isomor- 
phisms. From this pmnt on it differs in only one det^, viz, instead of it b«ng necessary to use 
the original primary cipher component for converting the cipher text to a monoalphabet, either 
it, or any one of the eleven possible equivalent primary components consisting of a complete set 
of 26 letters, may be used. However, as in the aforementioned example, in converting the cipher 
text to a monodphabet, it is necessary to duplicate the deciphering process, using an arbitrary 
sequence as the plain component. 

(29). 

O 





